Author Topic: Sirefef Trojan - Site redirects and more damage to my laptop  (Read 14786 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #30 on: March 18, 2012, 11:29:24 PM »
OK lets re-run Farbar and see what is missing

run farbar service scanner



Tick "All" options.
Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.

Please copy and paste the log to your reply.

ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #31 on: March 19, 2012, 05:37:07 AM »
Here it is.
« Last Edit: March 24, 2012, 05:25:30 AM by ssrisa »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #32 on: March 19, 2012, 11:25:16 AM »
OK there are some services not running that should be

Download  Windows Repair (all in one)  from this site

Install the programme then run

Go to step 2 and allow it to run Disc check


Once that is done then go to step 3 and allow it to run SFC



On the start repairs tab select advanced mode and click start


Leave the default options selected and start the repairs


ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #33 on: March 19, 2012, 04:38:25 PM »
Thanks essexboy  :) Internet is working now. System is definitely slower than before. Will monitor the system health today and report it.

ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #34 on: March 19, 2012, 04:41:37 PM »
I see an application called 'Mini Web Browser' everytime I lock and unlock the windows. It started appearing only when I was trouble shooting with your help in the past couple of days.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #35 on: March 19, 2012, 04:50:37 PM »
OK now we have a semblance of normality lets see if we can resolve the remaining issues

Please download a fresh copy of OTL as it has been updated

 Download OTL  to your Desktop
  • Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  • Select All Users
  • Under the Custom Scan box paste this in
netsvcs
%SYSTEMDRIVE%\*.exe
/md5start
consrv.dll
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
C:\Windows\assembly\tmp\U\*.* /s
%Temp%\smtmp\1\*.*
%Temp%\smtmp\2\*.*
%Temp%\smtmp\3\*.*
%Temp%\smtmp\4\*.*
>C:\commands.txt echo list vol /raw /hide /c
/wait
>C:\DiskReport.txt diskpart /s C:\commands.txt /raw /hide /c
/wait
type c:\diskreport.txt /c
/wait
erase c:\commands.txt /hide /c
/wait
erase c:\diskreport.txt /hide /c
CREATERESTOREPOINT

  • Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    • Post both logs

ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #36 on: March 19, 2012, 09:23:29 PM »
I ran OTL and the OTL.Txt log is attached. However, I did not get any extras log this time.
« Last Edit: March 24, 2012, 05:25:41 AM by ssrisa »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #37 on: March 19, 2012, 09:27:40 PM »
OK it now looks malware free - so what problems remain to solve  ;D

ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #38 on: March 19, 2012, 09:43:09 PM »
Glad to hear  that :) I will continue to monitor and report issues if any. Should I uninstall any apps that were installed in the past 3 days?

Thanks again for all your help. Really appreciate it.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #39 on: March 19, 2012, 09:44:14 PM »
As soon as you are happy I will remove them and tidy up, just in case we need to use one of them  ;D

ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #40 on: March 19, 2012, 09:48:31 PM »
Alright. I will let you know in 2 days.

ssrisa

  • Guest
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #41 on: March 19, 2012, 09:54:12 PM »
I saw few messages from Malwarebytes that says "Succesfully blocked access to a potentially malware website: 208.73.210.125 Type: Outgoing". I don't have any websites open at all. Is this something to worry about?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #42 on: March 19, 2012, 10:10:54 PM »
Just checking out why MBAM blocks that site

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89249
  • No support PMs thanks
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #43 on: March 19, 2012, 10:19:08 PM »
For me this is probably the biggest flaw in MBAM as it isn't just looking at malicious sites but many other categories, only WOT and HPhosts find anything, the remainder find nothing objectionable, http://www.urlvoid.com/scan/oversee.net/.

http://hosts-file.net/?s=oversee.net
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Sirefef Trojan - Site redirects and more damage to my laptop
« Reply #44 on: March 19, 2012, 10:21:05 PM »
I have just found out as well that MBAM blocks a whole domain .. Not the individual sites so good and bad are all lumped together as bad